12.1 Understanding Database Maintenance

The operations database (by default, igops) maintains a history of activities that occur in Identity Governance. For example, as part of the data collection process, the database stores the previous state of that collection to ensure that Identity Governance can return to that state if an error occurs. Over time, however, the size of the database increases with each new collection, publication, review, and other operations. This can have an adverse effect on the performance of some database queries, because they have to filter through more and more irrelevant historical data. Identity Governance includes the Database Maintenance feature, which allows Global, Data, or Maintenance administrator to archive older data in a separate archive database, and then allow historical data to be cleaned up from the operations database.

The Database Maintenance feature provides the following:

  • Displays running summaries of database updates and items that can be purged

  • Allows you to drill down to more specific data from summary items

  • Shows categorized lists of archive and cleanup activities

  • Allows you to cancel a running archive

  • Allows you to select specific cleanup entities to purge

  • Allows you to resume a canceled or otherwise disrupted scheduled archive

  • Shows the latest complete archive details

  • Allows you to start the database maintenance process, with optional database cleanup

  • Allows you to run cleanup in the background concurrently with other operations such as reviews, data collection, and data publishing when archiving is disabled

  • Allows you to schedule maintenance

When performing database cleanup, Identity Governance searches the operations database for purgeable items that are older than the number of retention days you specified. If you do not specify a number of retention days, Identity Governance cleans up anything that can be purged. It will not purge data that is still in a state where it might be needed for current operations. For more information about how Identity Governance decides which items can be purged, see Section 12.6, Identifying Purgeable Data. If archiving is enabled, data is archived to the archive database before it is purged from the operations database. Database cleanup will not occur if an archive fails to complete. You can disable archiving to bypass this restriction and to run cleanup in the background while performing other user tasks.

IMPORTANT:Disabling the archive feature purges all your data from the Identity Governance archive database. Be sure you back up your data in your archive system before you disable the archive feature. For more information about disabling archiving, see Section 12.4, Disabling and Enabling Archiving.

When you start database maintenance, Identity Governance selects, by default, the option for concurrent archiving, which allows archiving to occur while operations — such as collections, publications, scheduled processes, and starting reviews — are in progress. If you clear this selection, Identity Governance does not begin archiving until those operations are complete or are idling cleanly, and no new operations will start while archiving is in progress. Identity Governance operations automatically resume when archival tasks are complete or canceled. In addition, Identity Governance cannot update the operations database while an archive is in progress. Clear the selection only if you want to ensure that all updates to the operational database made by normal Identity Governance activities are archived to the archive database, and nothing is purged from the operations database until it has been properly archived.

If the Recent Archival Activity section lists an archive that was canceled or otherwise interrupted, you can click Start Maintenance, then select Resume archive on the Maintenance Options window to have the archive task resume from the point of interruption. Scheduled database maintenance allows you to configure concurrent archiving to automatically resume an archive that is canceled or otherwise interrupted.

NOTE:You may resume canceled or interrupted archive tasks only for concurrent archives.

An administrator has the ability to cancel archive and clean up tasks while they are running. Usually, both archive and cleanup tasks run automatically, one after the other, and when they are complete, normal Identity Governance operations automatically resume. However, an administrator may also choose to pause after the archive phase, after the cleanup phase, or both. If you choose to pause after the archive phase, you must manually resume and continue to the cleanup phase or cancel the cleanup phase and return to normal operations. If you choose to pause after the cleanup phase, you must manually return to normal operations. These optional pauses give administrators opportunities to suspend Identity Governance maintenance at key points and do other maintenance tasks they may deem important before proceeding. For example, they want to look at the database, copy the database, troubleshoot issues, and so forth. The recommended and default mode of operation for maintenance is to allow Identity Governance to automatically move through the maintenance phases and then automatically return to normal operations.